View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam
NSE 4 - FortiOS 7.6 Administrator Exam Materials - Question #75 Discussion
Community Explanations & Comments (14)
Mahboab Ali Ghaleb
1 year ago
Selected: B
B is correct
FRANCOIS
10 months ago
Selected: C
This question is duplicated, and the provided answer is incorrect. The correct answer should be C. Also, an option is missing: In Application and Filter Overrides, set the action for Google to Allow.
Anonymous User
8 months ago
Selected: C
Agree this should be C, B is incorrect as setting inspection to deep inspection will cause issues with TLS pinning
J K
7 months ago
Selected: D
which is correct here? @admin
Rebecca Marriott
7 months ago
Selected: B
Based on the technical requirements of FortiGate Application Control, the correct answer is B. Set SSL inspection to deep-content-inspection.
Why other options are incorrect:
A: The inspection mode is already set to Proxy-based (indicated by the green toggle in the Firewall Policy exhibit).
C: Moving the priority would only help if the "Priority 1" rule was the one blocking the traffic. Priority 1 appears to be for "Remote.Management" or similar, which wouldn't normally capture standard Google web traffic.
D: Adding a URL to a category is a Web Filter function. The issue here is related to the Application Control sensor failing to identify encrypted apps.
Why other options are incorrect:
A: The inspection mode is already set to Proxy-based (indicated by the green toggle in the Firewall Policy exhibit).
C: Moving the priority would only help if the "Priority 1" rule was the one blocking the traffic. Priority 1 appears to be for "Remote.Management" or similar, which wouldn't normally capture standard Google web traffic.
D: Adding a URL to a category is a Web Filter function. The issue here is related to the Application Control sensor failing to identify encrypted apps.
Anonymous User
6 months ago
Selected: C
C is correct.
deep-content-inspection doesn't exist
deep-content-inspection doesn't exist
Anonymous User
6 months ago
Selected: B
@Brave-Dumps.com Admin What is the Correct Answer ?
Brave-Dumps.com Admin
6 months ago
B
saquib ansari
5 months ago
Selected: C
In Application and Filter Overrides, set the action for Google to Allow
Anonymous User
4 months ago
Selected: B
it's B
Ahmed El Hasseen El Tom El Shaikh Berair
3 months ago
Selected: C
75
Sidney
3 months ago
Selected: C
C
Anonymous User
2 months ago
Selected: B
which is correct here? @admin
AHMAD ALRAMADAN
1 month ago
Selected: B
what is the correct ?
[email protected]
2 weeks ago
Selected: C
FortiOS check rules within Application and Filter overrides from top to bottom. Currently Priority 1 is set to Block including google applications while Google set to Monitor at Priority 2. Because blocking rule is evaluated first, Google Traffic is blocked before it reaches 2nd rule. Hence, moving Google entry to Priority 1 ensures it is evaluated first, allowing the traffic to be monitored/allowed instead of blocking.
A is wrong, as shown in firewall policy exhibit, it is already set to proxy-based inspection.
B is wrong, because SSL inspection to deep-content-inspection will not fix the rule ordering conflict top to bottom.
D is wrong as adding URL belongs to web filtering profile not application control profile.
A is wrong, as shown in firewall policy exhibit, it is already set to proxy-based inspection.
B is wrong, because SSL inspection to deep-content-inspection will not fix the rule ordering conflict top to bottom.
D is wrong as adding URL belongs to web filtering profile not application control profile.
Refer to the exhibits. You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits. You cannot access any of the Google applications, but you are able to access www.fortinet.com. What would you do to resolve this issue? (Choose one answer)
Brave-Dump Community Votes